HARICA: delayed revocation for bug 1943596

HARICA experienced a delay in revoking 43 mis-issued S/MIME SV certificates, which were supposed to be revoked by January 27, 2025. The delay was due to a Validation Specialist overlooking the assigned task on the scheduled day. Upon discovering the oversight on January 31, 2025, HARICA revoked 35 certificates and noted that 8 had already been revoked by subscribers. A full incident report was published, detailing the root cause as human error and lack of automated controls. HARICA has since implemented process improvements to prevent future occurrences and is committed to further automating the revocation process.

1. 2025-01-31 HARICA discovered that 43 mis-issued S/MIME SV certificates were not revoked by the deadline.
2. 2025-03-28 HARICA completed the last action item to improve revocation processes.

1. 2025-02-02 HARICA — HARICA reported the delay in revocation and outlined the steps taken to address the issue.
2. 2025-02-07 HARICA — HARICA provided a detailed incident report and impact assessment.
3. 2025-02-21 HARICA — HARICA discussed the root cause analysis and proposed improvements.
4. 2025-03-30 HARICA — HARICA confirmed the completion of the last action item related to revocation processes.
5. 2025-04-15 HARICA — HARICA submitted a closure summary for the incident.